# Begin /etc/pam.d/gdm-launch-environment auth required pam_env.so auth optional pam_permit.so account include system-account password required pam_deny.so -session optional pam_systemd.so session optional pam_keyinit.so force revoke session optional pam_permit.so # End /etc/pam.d/gdm-launch-environment